Overview

overview

10

Static

static

10

c036104261...04.exe

windows7-x64

10

c036104261...04.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0361042612267f77c6a7c74ae8a9d04.exe

  • Size

    200KB

  • Sample

    231230-xk64bsbfhm

  • MD5

    c0361042612267f77c6a7c74ae8a9d04

  • SHA1

    37f4c6b175ab32ba7f02f75a78218a547d11dfab

  • SHA256

    a54d172e550a9268cf9ff13a69ab9cfa76797129a42cba4fd64b877a5ea2fff3

  • SHA512

    d973a1a281c6c444f85d669d1a2b017fb086621857d9670b6d358cf0e3af4e879d2333b0879d7dbd06320bd113062ca07933a8674fc99649a50db4a354d01379

  • SSDEEP

    3072:sr85CNqW0JmKHX/fW76Juxa313foiJl60yFFGDcmohVEPgbgwQBLZw2zIl:k9EfHX/f66JLoslPcmohVEPfwQBFw2O

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      c0361042612267f77c6a7c74ae8a9d04.exe

    • Size

      200KB

    • MD5

      c0361042612267f77c6a7c74ae8a9d04

    • SHA1

      37f4c6b175ab32ba7f02f75a78218a547d11dfab

    • SHA256

      a54d172e550a9268cf9ff13a69ab9cfa76797129a42cba4fd64b877a5ea2fff3

    • SHA512

      d973a1a281c6c444f85d669d1a2b017fb086621857d9670b6d358cf0e3af4e879d2333b0879d7dbd06320bd113062ca07933a8674fc99649a50db4a354d01379

    • SSDEEP

      3072:sr85CNqW0JmKHX/fW76Juxa313foiJl60yFFGDcmohVEPgbgwQBLZw2zIl:k9EfHX/f66JLoslPcmohVEPfwQBFw2O

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks